MAL-2025-69186 Malicious code in live-bronze-goat (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d18a72a697b1c961f8419e7863d7d36de1da65e7b3887332fe6968ec13c8246e This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-53461

Malicious code in live-rose-pinniped npm...

EUVD-2025-53464

Malicious code in live-blue-dove npm...

EUVD-2025-53465

Malicious code in live-amaranth-bison npm...

EUVD-2025-53463

Malicious code in live-bronze-goat npm...

EUVD-2025-53462

Malicious code in live-copper-xerinae npm...

WordPress plugin Live Photos on WordPress 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

SUSE SLES15 Security Update : kernel (Live Patch 49 for SUSE Linux Enterprise 15 SP3) (SUSE-SU-2025:4016-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4016-1 advisory. This update for the SUSE Linux Enterprise kernel 5.3.18-150300.59.179 fixes various security issues The following security issues were fixed: -...

PT-2025-46254

Name of the Vulnerable Software and Affected Versions Five9 Live Chat plugin for WordPress versions through 1.1.2 Description The Five9 Live Chat plugin for WordPress is susceptible to Stored Cross-Site Scripting through the toolbar attribute within the five9-chat shortcode. This occurs because o...

WordPress plugin Five9 Live Chat 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A cross-site scripting...

SUSE SLES15 Security Update : kernel (Live Patch 32 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2025:4036-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4036-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.136 fixes various security issues The following security issues were fixed: ...

SUSE SLES12 Security Update : kernel (Live Patch 63 for SUSE Linux Enterprise 12 SP5) (SUSE-SU-2025:4024-1)

The remote SUSE Linux SLES12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4024-1 advisory. This update for the SUSE Linux Enterprise kernel 4.12.14-122.237 fixes various security issues The following security issues were fixed: -...

SUSE SLES15 Security Update : kernel (Live Patch 61 for SLE 15 SP3) (SUSE-SU-2025:4004-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4004-1 advisory. This update for the Linux Kernel 5.3.18-15030059218 fixes several issues. The following security issues were fixed: - CVE-2022-50248: wifi:...

PT-2025-46284

Name of the Vulnerable Software and Affected Versions Live Photos on WordPress plugin versions prior to 0.1 Description The Live Photos on WordPress plugin for WordPress is susceptible to Stored Cross-Site Scripting. This is due to insufficient input sanitization and output escaping on...

SUSE SLES15 Security Update : kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP4) (SUSE-SU-2025:4040-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4040-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.170 fixes various security issues The following security issues were fixed: ...

SUSE SLES15: kernel-livepatch-5_14_21-150400_24_176-default / etc (SUSE-SU-2025:4003-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4003-1 advisory. This update for the Linux Kernel 5.14.21-15040024176 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix...

SUSE SLES15 Security Update : kernel (Live Patch 1 for SLE 15 SP7) (SUSE-SU-2025:4001-1)

The remote SUSE Linux SLES15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4001-1 advisory. This update for the Linux Kernel 6.4.0-150700533 fixes several issues. The following security issues were fixed: - CVE-2025-38664: ice: Fix a...

SUSE SLES15: kernel-livepatch-5_14_21-150400_24_141-default / etc (SUSE-SU-2025:4031-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4031-1 advisory. This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.141 fixes various security issues The following security issues were fixed: ...

WordPress Live Photos on WordPress plugin <= 0.1 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode vulnerability

Authenticated Contributor+ Stored Cross-Site Scripting via Shortcode vulnerability discovered by zakaria in WordPress Plugin Live Photos on WordPress versions = 0.1...

Security update for the Linux Kernel (Live Patch 42 for SUSE Linux Enterprise 15 SP4)

This update for the SUSE Linux Enterprise kernel 5.14.21-150400.24.170 fixes various security issues The following security issues were fixed: CVE-2022-50252: igb: Do not free qvector unless new one was allocated bsc1249847. CVE-2024-53164: net: sched: fix ordering of qlen adjustment bsc1246019...